Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: UUp86vBq32z4iabNrjxFuSUNTV7Lbcx+2HYSGP7PmPg=
Subject key identifier: 6F:D1:F6:A9:B9:2C:A6:12:B6:96:5B:44:AB:66:0E:1D:8B:D7:3E:FF
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 019D9962F7ABAAB82DC45EB05495381CF088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:01:33 +0000
Manifest this update: Fri 17 Apr 2026 03:01:33 +0000
Manifest next update: Sat 18 Apr 2026 03:01:33 +0000
Files and hashes: 1: A4GalviEuSvDRygo_-qVl6eCT10.roa (hash: sSlPwV0yRve9+trsnROr061h+b28t0Ygn3kbHKwNHiA=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: N3i4lKfXDxUr1ujX4te4uFwGs4O02OFhI/OLMEFBxoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:f7:ab:aa:b8:2d:c4:5e:b0:54:95:38:1c:f0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Apr 17 03:01:33 2026 GMT
Not After : Apr 18 03:01:33 2026 GMT
Subject: CN=6fd1f6a9b92ca612b6965b44ab660e1d8bd73eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:8d:b0:54:db:cd:88:c5:80:18:fc:f2:26:
80:d0:e6:7c:fc:ca:c2:a1:2a:18:6a:80:2e:eb:2d:
2a:94:f7:47:31:42:6f:47:5a:63:c4:c0:81:49:cd:
59:0c:08:06:48:0e:2c:42:a0:b1:e7:cd:9d:3b:9f:
fd:d3:e3:51:dd:45:0a:e7:a8:d1:19:aa:35:b4:49:
20:81:8c:02:43:d8:b0:16:09:e1:4d:53:92:37:00:
f1:0b:ab:32:80:87:f3:6e:69:85:0e:ba:67:3b:68:
4f:8b:2f:f0:a5:93:87:94:85:98:db:f9:6b:43:ee:
4c:b9:1b:9c:f3:8b:92:99:87:7b:8c:e2:24:16:ef:
f8:03:c0:aa:2e:3d:11:2f:44:67:a3:4a:7e:1e:c5:
59:18:5d:8b:bb:f7:b2:9e:ef:96:e3:c9:d5:bc:4e:
31:9d:01:05:54:17:6d:a5:0c:9d:f5:21:31:21:79:
72:7b:cd:24:d4:63:f1:11:8d:99:ab:8a:3a:d6:4c:
8f:a0:86:29:c2:b9:31:4f:57:d5:cf:5e:83:eb:76:
30:a8:1b:dc:c1:ad:99:fd:aa:94:93:c6:fe:58:20:
db:23:26:5d:0b:1d:c3:3a:c7:6c:77:c5:7f:44:32:
5f:7d:5c:89:bb:69:14:84:b2:bd:8a:fe:5b:b9:0b:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D1:F6:A9:B9:2C:A6:12:B6:96:5B:44:AB:66:0E:1D:8B:D7:3E:FF
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c0:c7:a8:a1:40:29:b0:d7:a0:71:4e:0d:12:54:1a:b3:c3:
53:f4:8c:ca:3a:5b:22:73:30:ee:8f:99:4c:6d:df:4c:32:be:
a3:51:a1:cf:ac:87:f0:9b:14:1d:75:95:de:55:9e:61:35:43:
17:0d:f9:00:75:a4:aa:58:75:95:59:35:ac:e3:0a:e6:25:c5:
15:55:7e:ed:dc:08:e5:42:0f:04:3b:4e:d4:33:fe:c8:eb:b2:
b3:8f:50:01:57:8f:b4:9e:cf:ca:66:36:cc:be:d5:34:7e:a1:
e3:d8:ce:09:9f:12:85:f7:33:72:2d:ea:85:2c:46:0b:fb:79:
5c:06:ed:7f:88:68:59:b4:b7:4b:fc:7a:18:80:9e:c0:ae:f4:
08:5f:aa:fe:e0:61:5d:0b:80:8c:83:6f:10:9d:87:d3:37:78:
1d:3f:9c:61:3f:0b:92:35:b2:79:ff:73:aa:0e:85:f0:f4:0b:
30:76:1a:ee:a3:12:e5:11:1d:8b:ee:18:f1:9e:6f:02:cb:58:
f7:9f:a8:c1:35:a6:c5:70:bf:6c:ee:45:ea:fb:fe:a8:cb:df:
c7:52:c2:f3:45:64:69:6c:c2:a6:30:7e:35:ea:db:b2:96:08:
a3:8b:36:bb:ae:d0:7c:6d:92:cb:1d:ed:28:ff:37:9f:77:5c:
b8:88:a9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:44 2026 by rpki-client